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- The MAILING DA TE of this communication appears on the cover sheet with the correspondence address ~ 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )H Responsive to communication(s) filed on 25 February 2005 . 
2a)M This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quay/e, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) H Claim(s) 1-6.8-12 and 14-17 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) H Claim(s) 1-6.8-12 and 14-17 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) Q The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 



Response to Arguments 

1 . Applicant's arguments filed February 25, 2005 have been fully considered but 
they are not persuasive. 

As per claim 1, the applicant has argued that there is no mention in the teachings 
of Bowman of any enrollment certificates for a VPN much less of where a request for an 
enrollment certificate for a VPN is transmitted. The examiner disagrees, the teachings 
of Bowman disclose of the use of VPN (column 75, lines 64-65) and within the VPN, a 
Registration Authority is used to process certificate requests (i.e. enrollment . 
certificates)(column 76, lines 10-12). The Certificate Authority is relied upon for the use 
of administering the certificates to a user (column 76, lines 7-1 0). 

The applicant additionally argues that Bowman, Figure 40 is directed towards a 
different system architecture than that of Figure 36. The examiner has shown the 
remoteness of the Certificate Authority and that of the Registration Authority in Figure 
40 to shown that they are independent of one another. Figure 36 demonstrates of the 
VPN with both a Registration Authority and a Certificate Authority. Similar to that as is 
recited above, a Registration Authority is used to process certificate requests (i.e. 
enrollment certificates)(column 76, lines 10-12) and a Certificate Authority is used for 
administering the certificates to a user (column 76, lines 7-10) and based upon Figure 
36, they are located at separate nodes. Based upon the disclosure of Bowman, they 
both perform independent functions and still anticipate the applicant's claim language. 
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The examiner notes that although a Certificate Authority is claimed, there is no 
functionality claimed by the applicant for the Certificate Authority only in that it is 
independent of the Registration Authority. 

As per claim 2, it is argued by the applicant that Bowman does not disclose of 
transmission of additional requests regarding maintaining enrollment in the VPN to the 
Registration Authority. The examiner respectfully disagrees. Bowman discloses of a 
Registration Authority that is used to process certificate requests (i.e. enrollment 
certificates)(column 76, lines 10-12) within a VPN (column 75, lines 64-65). These 
multiple, or additional requests satisfy the requirement to meet the applicant's claim 
limitations. 

As per claims 4 and 10, the applicant has argued that the teachings of An et al 
fail to disclose of receiving a get certificate request from a CA, generating a response 
including the certificate of the CA and returning the response to the device. The 
examiner disagrees with the applicant's interpretation of the teachings of An et al. It is 
disclosed by An et al of a remote agent sending a request, (i.e. get) for a certificate to 
an RA, the RA forwards the request to a CA which then signs the certificate through the 
CA, and returns the certificate (i.e. generated response in the form of a certificate) to the 
RA which in turn sends the certificate to the remote agent for delivery to the user (col. 
12, lines 22-30). 
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Claim Rejections - 35 USC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e).the invention was described in (1 ) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

2. Claims 1-3 are rejected under 35 U.S.C. 102(e) as being anticipated by Bowman- 
Amuah, U.S. Patent 6,69.7,824 (herein referred to as Bowman). 

As per claim 1, it is disclosed by Bowman of a computer readable media having 
stored thereon a computer program (col. 87, lines 54-56). It is inherent that a processor 
of a computing device executes the program since processors are necessary to read, 
interpret, and execute the computer programs so that they are executed in the manner 
that the computer program was intended to be run. A request is transmitted for an 
enrollment certificate for a virtual private network to a registration authority (RA)(col. 75, 
line 65 through col. 76, line 12). Figure 40 shows the registration authority (RA) 
operates independently from the certificate authority (CA) since they are remotely 
located from one another. 

As per claim 2, it is inherent that a processor of a computing device executes the 
program since processors are necessary to read, interpret, and execute the computer 
programs so that they are executed in the manner that the computer program was 
intended to be run. Bowman discloses that requests are transmitted for an enrollment 



Application/Control Number: 10/801,333 Page 5 

Art Unit: 2131 

certificate for a virtual private network to a registration authority (col. 75, line 65 through 
col. 76, line 12). 

As per claim 3, it is shown in Figure 40 of Bowman that a router (computing 
device) is used. 

3. Claims 4,6,8,10,12,14,16, and 17 are rejected under 35 U.S.C. 102(e) as being 
anticipated by An et al, U.S. Patent 6,715,073. 

As per claim 4, An et al discloses of a method implemented at a registration 
authority (RA) wherein a vault agent (device) sends a request for a certificate from a 
certificate authority (CA). The RA receives the request and then forwards the request to 
the CA and the CA then generates a certificate (response) and sends it to the RA which 
then sends it back to the remote agent (device)(col. 12, lines 22-30 and col. 13, lines 
50-52). 

As per claims 6 and 12, An et al discloses of the registration authority (RA) being 
automated (col. 12, lines 24-28). It is interpreted by the examiner that the automation is 
a dynamically linked library since it is just software code. 

As per claims 8 and 14, it is taught by An et al that the response includes both 
signing of a certificate of the RA and an encryption certificate of the RA (col. 1 1 , lines 
34-37 and col. 12, lines 22-30). 

As per claim 10, An et al discloses of an article of manufacture (computer 
readable media) containing machine readable instructions (computer program), when 
executed by a processor at a registration authority (RA), allow a vault agent (device) to 



Application/Control Number: 1 0/801 ,333 Page 6 

Art Unit: 2131 

sends a request for a certificate from a certificate authority (CA). The RA receives the 
request and then forwards the request to the CA and the CA then generates a certificate 
(response) and sends it to the RA which then sends it back to the remote agent 
(device)(col. 12, lines 22-30 & 45-48, and col. 14, lines 39-44). 

As per claims 16 and 17, An et al discloses of generating a response including 
the certificate of the registration authority instead of the certificate authority (col. 12, 
lines 22-30). That is interpreted by the examiner that the registration authority is 
responsible for passing the certificate to the remote agent, not the certificate authority. 



Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 5 and 1 1 rejected under 35 U.S.C. 103(a) as being unpatentable over An 
et al, U.S. Patent 6,715,073. 

The teachings of An et al are relied upon for the use of a registration authority 
requesting a certificate from a certificate authority on behalf of a remote agent 
(device)(col. 12, lines 22-30). The teachings of An et al of the use of the communicating 
across the Internet (col. 5, lines 34-40), but fail to disclose of a router. The examiner 
hereby asserts that the use of a router is notoriously well known. It would have been 
obvious to a person of ordinary skill in the art to have been motivated to have means to 
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allow communications to be expedited across an Internet. One of ordinary skill would 
have been motivated to apply a router since routers are used for linking many 
computers and receives messages from computers and forwards them to the correct 
destination over the most efficient path. It is obvious that the teachings of An et al use 
routers so that communications can be efficiently forwards from a source to a 
destination. 

6. Claims 9 and 1 5 are rejected under 35 U.S.C. 1 03(a) as being unpatentable over 
An et al, U.S. Patent 6,71 5,073 in view of Housley et al. 

The teachings of An et al are relied upon for the use of a registration authority 
requesting a certificate from a certificate authority on behalf of a remote agent 
(device)(col. 12, lines 22-30). The teachings of An et al disclose of the use of X.509 
certificates (col. 6, lines 15-21), but are silent in disclosing of including information 
pertaining to certificate chains of the certificate authority. It is disclosed by Housley et al 
in the X.509 standard that recites of accessing a chain of certificates (pg 9, section 3.2). 
It would have been obvious to a person of ordinary skill in the art to have been 
motivated to apply chains of certificates based on the X.509 standard. Housley et al 
recites motivation for a chain of certificates by disclosing certification chains are 
required because a public key user is only initialized with a limited number of CA 
assured public keys (pg 9, section 3.2). It is obvious that the teachings of Housley et al 
could be applied to the teachings of An et al as a means of limiting the number of CA 
public keys as is suggested by Housley et al. 
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Conclusion 

7. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Christopher A. Revak whose telephone number is 571- 
272-3794. The examiner can normally be reached on Monday-Friday, 6:30am-4:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-21 7-91 97 (toll-free). 



Christopher Revak 
AU2131 
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